SAP HANA XS Advanced Model User Account and Authentication Service Open Redirect Vulnerability

A vulnerability in the User Account and Authentication service for SAP HANA extended application services, advanced model, allows an unauthenticated attacker to create a malicious link that, when clicked by a victim, redirects the browser to a harmful site. This exploitation takes advantage of inadequate validation of redirect URLs. Successful exploitation could lead to a limited impact on the system's confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could cause a limited impact on the confidentiality, integrity, and availability of the system.

Remediation

Users are advised to review and implement the SAP Security Note related to this vulnerability, available through the SAP Security Patch Day.